CVE-2026-13575None▾ SunlitHTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI. The session id from the client's cookie reaches the CHI cache unchanged. The sibling HTTP::Session::S…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.9%
Last analysed / modified upstream
HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI.
The session id from the client's cookie reaches the CHI cache unchanged. The sibling HTTP::Session::Store::Memcached rejects ids that contain control characters, but the CHI store has no such check, and CHI does not escape keys for its memcached drivers.
With a memcached driver, a CR and LF in the session id end the cache command early, and the server reads the bytes after them as further commands.
http-session < 0.54Upgrade to http-session 0.54 or later.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-61477Low· 2.3Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
CVE-2026-109683Medium· 5.3UPnP Newline Injection Vulnerability in TP-Link Archer BE805
CVE-2026-123298Medium· 5.0In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible
CVE-2026-28296Medium· 4.3Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths
CVE-2026-1536Medium· 5.8Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header
CVE-2026-1467Medium· 5.8Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured